IBM Security Expert Labs offers new remote services for IBM Security QRadar, IBM Security Guardium, and IBM Security SOAR to help accelerate deployment of your cyber security solutions

IBM United States Software Announcement 221-107
March 23, 2021

Table of contents
OverviewOverviewTechnical informationTechnical information
Key requirementsKey requirementsOrdering informationOrdering information
Planned availability datePlanned availability dateTerms and conditionsTerms and conditions
DescriptionDescriptionPricesPrices
Program numberProgram numberOrder nowOrder now
PublicationsPublications


At a glance

Top rule

IBM Security™ Expert Labs helps maximize the value of IBM Security solutions. The network of software experts can help organizations deploy, optimize, and expand their security tools and solutions.

The following services are available to help meet your security needs:

  • IBM Security QRadar® Expert Labs Services
  • IBM Security Guardium® Expert Labs Services
  • IBM Security SOAR Expert Labs Services

IBM® X-Force® IRIS Vision Retainer is renamed IBM Security X-Force Incident Response Retainer.



Back to topBack to top

Overview

Top rule

Security QRadar Expert Labs Services

The following remotely delivered service engagement offerings are now available:

  • IBM QRadar Standard 5 Day Remote
  • IBM QRadar 1 Day Remote Add-on
  • IBM QRadar UBA 3 Day Remote

QRadar Standard 5 Day Remote and QRadar 1 Day Remote Add-on

Selectable activities:

  • Solution design workshop
  • Configuration and deployment recommendations
  • Appliance deployment (either virtual or physical)
  • Log collection
  • Standard log source attachment
  • Customer log source attachment
  • Flow collection
  • Collection of network activity from up to three instances of flow sources
  • Appliance configuration document deliverable
  • Initial tuning of IBM Security QRadar environment
  • Identify and remove sources of noise
  • Activate rules, saved searches, and accumulate time series graphs
  • Schedule and modify reports
  • Customize dashboards
  • Advanced tuning based on business requirements and security policies
  • Creation and tuning of up to five custom rules and three custom reports
  • Configuration of one default compliance report package (choose from PCI, SOX, FISMA, GLBA, GSX memo 22, HIPAA, or NERC-CIP)
  • Use case creation
  • Documentation of performed work

QRadar UBA 3 Day Remote

Selectable activities:

  • Data source validation
  • User Behavior Analytics (UBA) installation and configuration
  • Basic threshold tuning
  • Reduction of false positives
  • Lower the number of errors to a manageable level
  • Knowledge transfer

Security Guardium Expert Labs Services

The following remotely delivered service engagement offerings are now available:

  • IBM Security Guardium Expert Labs Starter Pack
  • IBM Security Guardium Expert Labs Health Check
  • IBM Security Guardium Expert Labs Assistance

Security Guardium Expert Labs Starter Pack entitles organizations to deploy any Security Guardium solution component for a predefined scope, based on standard practices and a proven deployment approach, limited to a maximum of 20 days for each starter pack purchased.

Security Guardium Expert Labs Health Check performs a comprehensive review of an existing Security Guardium deployment. It delivers a Health Check Report that outlines findings and provides recommendations to optimize a deployment, and is limited to a maximum of 12 days for each health check purchased.

Security Guardium Expert Labs Assistance provides 40 hours of Guardium Expert Labs assistance on a variety of general activities.

Security SOAR Expert Labs Services

Security SOAR Expert Labs Services, formerly known as IBM Security Expert Labs for Resilient® Services, adds an enhanced service package that is designed to help organizations with IBM Security SOAR optimize the value of their Security SOAR installation.

IBM Security SOAR Expert Labs Assistance

This offering is sold in one-day (eight hours) increments, with a minimum quantity of three days, and is applicable to organizations that currently have Security SOAR. Security SOAR Expert Labs Assistance may include the following:

  • Optimization of organization's installation (where applicable)
  • Configuration of additional Security SOAR users, integrations, or extensions (where applicable)
  • Refresher training for new and existing support analysts
  • Introduction to designers on how to configure and use additional Playbooks that reflect your organization's key requirements
  • A quick scan of the Security SOAR environment to surface potential improvement areas

Security X-Force Incident Response Retainer

IBM X-Force Incident Response and Intelligence Services (IRIS) Vision Retainer is a subscription-based service that helps organizations intelligently prepare for, detect, and remediate attacks to reduce the timeline for potential impact. It has been renamed IBM Security X-Force Incident Response Retainer.



Back to topBack to top

Key requirements

Top rule

  • An internet connection and a browser


Back to topBack to top

Planned availability date

Top rule

March 23, 2021



Back to topBack to top

Description

Top rule

Accessibility by people with disabilities

Accessibility Compliance Reports (previously known as a VPAT) containing details on accessibility compliance to standards, including the Worldwide Consortium Web Content Accessibility Guidelines, European Standard EN 301 349, and US Section 508, can be found on the IBM Accessibility Conformance Report Request website.



Back to topBack to top

Reference information

Top rule

For more information about IBM Security Expert Labs for Resilient Services, see Software Announcement 220-251, dated June 9, 2020.

For more information about IBM Security X-Force Incident Response Retainer, formerly known as IBM X-Force IRIS Vision Retainer Services, see:

  • Software Announcement 220-297, dated July 14, 2020.
  • Software Announcement 220-352, dated September 22, 2020.


Back to topBack to top

Program number

Top rule

Program number VRM Program name
5900-AHA Cloud service IBM Security QRadar Expert Labs Services
5900-AH9 Cloud service IBM Security Guardium Expert Labs Services
5900-AAS Cloud service IBM Security SOAR Expert Labs Services
5900-AAX Cloud service IBM Security X-Force Incident Response Retainer


Back to topBack to top

Offering Information

Top rule

Product information is available on the IBM Offering Information website.

More information is also available on the Passport Advantage® and Passport Advantage Express website.



Back to topBack to top

Publications

Top rule

Publications are available in IBM Knowledge Center.

All publications are not currently available in IBM Knowledge Center as HTML. For this reason, the Welcome page links to a complete PDF library. Additional publications are planned to be available as HTML in the future.



Back to topBack to top

Services

Top rule

Software Services

IBM Software Services has the breadth, depth, and reach to manage your services needs. You can leverage the deep technical skills of the lab-based software services team and the business consulting, project management, and infrastructure expertise of the IBM Global Services team. IBM provides the global reach, intellectual capital, industry insight, and technology leadership to support a wide range of critical business needs.

To learn more about IBM Software Services, contact your Lab Services Sales or Delivery Leader.



Back to topBack to top

Technical information

Top rule

Specified operating environment

Software requirements

Information about software requirements, if available, are in IBM Knowledge Center.

Such information is provided subject to the following terms. IT system security involves protecting systems and information through prevention, detection, and response to improper access from within and outside your enterprise. Improper access can result in information being altered, destroyed, misappropriated, or misused, or can result in damage to or misuse of your systems, including for use in attacks on others. No IT system or product should be considered completely secure and no single product, service, or security measure can be completely effective in preventing improper use or access. IBM systems, products, and services are designed to be part of a lawful, comprehensive security approach, which will necessarily involve additional operational procedures, and may require other systems, products, or services to be most effective.

Important: IBM does not warrant that any systems, products, or services are immune from, or will make your enterprise immune from, the malicious or illegal conduct of any party.

IBM Support

IBM Support is your gateway to technical support tools and resources that are designed to help you save time and simplify support. IBM Support can help you find answers to questions, download fixes, troubleshoot, submit and track problem cases, and build skills. Learn and stay informed about the transformation of IBM Support, including new tools, new processes, and new capabilities, by going to the IBM Support Insider.

Planning information

Packaging

These offerings are delivered through the internet. There is no physical media.



Back to topBack to top

Ordering information

Top rule

For ordering information, consult your IBM representative or go to the Passport Advantage website.

This program is only available through Passport Advantage. It is not available as shrinkwrap.


Passport Advantage

IBM Security QRadar Expert Labs Services (5900-AHA)

Part description Part number
IBM Security QRadar Standard 5 Day Remote Engagement Remotely Delivered SW Services D054EZX
IBM Security QRadar UBA 3 day Remote Engagement Remotely Delivered SW Services D054GZX
IBM Security QRadar 1 Day Remote Add-on Engagement Remotely Delivered SW Services D054FZX

IBM Security Guardium Expert Labs Services (5900-AH9)

Part description Part number
IBM Security Guardium Expert Labs Starter Pack (20 days) Engagement Remotely Delivered SW Services D054DZX
IBM Security Guardium Expert Labs Health Check (12 days) Engagement Remotely Delivered SW Services D054CZX
IBM Security Guardium Expert Labs Assistance (5 days) Engagement Remotely Delivered SW Services D054BZX

IBM Security SOAR Expert Labs Services (5900-AAS)

Part description Part number
IBM Security SOAR Expert Labs Assistance Engagement Remotely Delivered SW Services D05BHZX

The following part numbers have been renamed:

IBM Security SOAR Expert Labs Services (5900-AAS)

Part number Previous part description New part description
D02TRZX IBM Security Expert Labs for Resilient Premium Starter Service Engagement Remotely Delivered SW Services IBM Security SOAR Expert Labs Premium Starter Service Engagement Remotely Delivered SW Services
D02TTZX IBM Security Expert Labs for Resilient Base Starter Service Engagement Remotely Delivered SW Services IBM Security SOAR Expert Labs Base Starter Service Engagement Remotely Delivered SW Services
D02TSZX IBM Security Expert Labs for Resilient Additional Day Engagement Remotely Delivered SW Services IBM Security SOAR Expert Labs Additional Day Engagement Remotely Delivered SW Services

IBM Security X-Force Incident Response Retainer (5900-AAX)

Part number Previous part description New part description
D02ZWZX IBM X-Force IRIS Vision Retainer Services Engagement per Annum IBM Security X-Force Incident Response Retainer Services Engagement per Annum

Charge metric

Definitions of the charge metrics for this cloud service can be found in the following Service Description document:

Program identifier Service Description document title Service Description document number
5900-AHA IBM Security QRadar Expert Labs Services 8988-01
5900-AH9 IBM Security Guardium Expert Labs Services 8990-01
5900-AAS IBM Security SOAR Expert Labs Services 8508-04
5900-AAX IBM Security X-Force Incident Response Retainer 8848-02

Select your language of choice and scroll down to the Charge Metrics section.

Follow-on levels of this cloud service, if any, may have updated charge metrics. See the Cloud Services terms website. Search using the four-digit base Service Description number and scroll down to the Charge Metric section.



Back to topBack to top

Terms and conditions

Top rule

The information provided in this announcement letter is for reference and convenience purposes only. The terms and conditions that govern any transaction for the acquisition of Cloud Services from IBM consist of either the IBM Cloud® Services Agreement and the applicable offering Service Description or the IBM International Passport Advantage Agreement or the International Passport Advantage Express Agreement and the IBM Terms of Use - General Terms for Cloud Offerings and the applicable offering Service Description.

Technical support

Technical support is provided for Cloud Services and enabling software, as applicable, during the subscription period. Any enhancements, updates, and other materials provided by IBM as part of any such technical support are considered to be part of the Cloud Service, as applicable, and therefore governed by the applicable agreement as defined in Client's quote or transaction document. Technical support is included with the Cloud Service and is not available as a separate offering.

Additional technical support information for this Cloud Service offering may be found in the IBM Support Guide or in service-specific documentation.

Service Description

The following Service Description document applies offering in this announcement.

Program identifier Service Description document title Service Description document number
5900-AHA IBM Security QRadar Expert Labs Services 8988-01
5900-AH9 IBM Security Guardium Labs Services 8990-01
5900-AAS IBM Security SOAR Expert Labs Services 8508-04
5900-AAX IBM Security X-Force Incident Response Retainer 8848-02

Follow-on levels of this cloud service , if any, may have updated terms. See the Cloud Services terms website and search using the four-digit base Service Description number.

Limited warranty

See the warranty defined in the applicable agreement governing client's acquisition for this offering.

Money-back guarantee

No

Volume orders (IVO)

No

Passport Advantage applies

Yes, information is available on the Passport Advantage and Passport Advantage Express website.

Other support

Appliance support under Passport Advantage

Educational allowance available

No.



Back to topBack to top

Statement of good security practices

Top rule

IT system security involves protecting systems and information through intrusion prevention, detection, and response to improper access from within and outside your enterprise. Improper access can result in information being altered, destroyed, or misappropriated or can result in misuse of your systems to attack others. Without a comprehensive approach to security, no IT system or product should be considered completely secure and no single product or security measure can be completely effective in preventing improper access. IBM systems and products are designed to be part of a regulatory compliant, comprehensive security approach, which will necessarily involve additional operational procedures, and may require other systems, products, or services to be most effective.

Important: IBM does not warrant that any systems, products, or services are immune from, or will make your enterprise immune from, the malicious or illegal conduct of any party.



Back to topBack to top

Prices

Top rule

For additional information and current prices, contact your local IBM representative.


Passport Advantage

For Passport Advantage information and charges, contact your IBM representative. Additional information is also available on the Passport Advantage and Passport Advantage Express website.

IBM Global Financing

IBM Global Financing offers competitive financing to credit-qualified clients to assist them in acquiring IT solutions. Offerings include financing for IT acquisition, including hardware, software, and services, from both IBM and other manufacturers or vendors. Offerings (for all client segments: small, medium, and large enterprise), rates, terms, and availability can vary by country. Contact your local IBM Global Financing organization or go to the IBM Global Financing website for more information.

IBM Global Financing offerings are provided through IBM Credit LLC in the United States, and other IBM subsidiaries and divisions worldwide to qualified commercial and government clients. Rates are based on a client's credit rating, financing terms, offering type, equipment type, and options, and may vary by country. Other restrictions may apply. Rates and offerings are subject to change, extension, or withdrawal without notice.



Back to topBack to top

Order now

Top rule

To order, contact the IBM Digital Sales Center, your local IBM representative, or your IBM Business Partner. To identify your local IBM representative or IBM Business Partner, call 800-IBM-4YOU (426-4968). For more information, contact the IBM Digital Sales Center.

Phone: 800-IBM-CALL (426-2255)

Fax: 800-2IBM-FAX (242-6329)

For IBM representative: askibm@ca.ibm.com

For IBM Business Partner: pwcs@us.ibm.com



IBM Digital Sales Offices
1177 S Belt Line Rd
Coppell, TX 75019-4642, US

The IBM Digital Sales Center, our national direct marketing organization, can add your name to the mailing list for catalogs of IBM products.

Trademarks

IBM Security is a trademark of IBM Corporation in the United States, other countries, or both.

QRadar, Guardium, IBM, X-Force, Resilient, Passport Advantage and IBM Cloud are registered trademarks of IBM Corporation in the United States, other countries, or both.

Other company, product, and service names may be trademarks or service marks of others.

Terms of use

IBM products and services which are announced and available in your country can be ordered under the applicable standard agreements, terms, conditions, and prices in effect at the time. IBM reserves the right to modify or withdraw this announcement at any time without notice. This announcement is provided for your information only. Additional terms of use are located at

Terms of use

For the most current information regarding IBM products, consult your IBM representative or reseller, or go to the IBM worldwide contacts page

IBM United States